$ rpki-client -vvf rpki.apnic.net/member_repository/A91F473F/1D17EDB42B9011EE8B5DE470C4F9AE02/NcbYSDFsIdmTz25MBtYB3AXvxOE.mft File: NcbYSDFsIdmTz25MBtYB3AXvxOE.mft (raw, json) Hash identifier: 4GUUTE+oJKQLDL7IfSXNtwSRC/5y/+kFqbCO6Fzmf8U= Subject key identifier: B5:10:7B:92:FB:F7:FD:06:48:5C:5C:8D:55:FD:92:2E:C1:86:13:C9 Authority key identifier: 35:C6:D8:48:31:6C:21:D9:93:CF:6E:4C:06:D6:01:DC:05:EF:C4:E1 Certificate issuer: /CN=A91F473F/serialNumber=35C6D848316C21D993CF6E4C06D601DC05EFC4E1 Certificate serial: 9D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NcbYSDFsIdmTz25MBtYB3AXvxOE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F473F/1D17EDB42B9011EE8B5DE470C4F9AE02/NcbYSDFsIdmTz25MBtYB3AXvxOE.mft Manifest number: 9C Signing time: Sun 19 May 2024 06:50:52 +0000 Manifest this update: Sun 19 May 2024 06:50:51 +0000 Manifest next update: Sun 26 May 2024 06:50:51 +0000 Files and hashes: 1: NcbYSDFsIdmTz25MBtYB3AXvxOE.crl (hash: YtQSQ0P4jYQYbmiv97ekCKHul//PGtyNxxZ7qLezwEY=) 2: C416FBB02D6F11EEAC755B42C4F9AE02.roa (hash: nq/s3M0eupGD8RfU68NQY3V7PyDrDmlgFpWvkla+pIE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F473F/1D17EDB42B9011EE8B5DE470C4F9AE02/NcbYSDFsIdmTz25MBtYB3AXvxOE.crl rsync://rpki.apnic.net/member_repository/A91F473F/1D17EDB42B9011EE8B5DE470C4F9AE02/NcbYSDFsIdmTz25MBtYB3AXvxOE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NcbYSDFsIdmTz25MBtYB3AXvxOE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 157 (0x9d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F473F/serialNumber=35C6D848316C21D993CF6E4C06D601DC05EFC4E1 Validity Not Before: May 19 06:50:51 2024 GMT Not After : May 26 06:50:51 2024 GMT Subject: CN=6649a14b-8e0a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:b4:dc:fb:d0:17:65:df:24:a7:9c:bb:3c:e0: 63:ac:ca:f7:de:97:92:d8:81:8b:3e:1c:bd:49:21: f9:40:b1:77:1d:65:d3:12:2e:24:4c:41:75:a5:9b: 1a:70:6f:18:b4:fc:56:c8:55:d7:d3:2f:ea:74:77: a8:74:5a:13:87:37:3c:d9:f2:e8:d5:e9:3c:32:aa: 8e:6e:ce:19:f1:ba:77:e4:7f:74:d8:60:a9:66:45: a4:65:5d:26:2d:19:3f:67:8a:8c:8c:63:5e:7d:65: 58:62:0d:57:e8:73:76:ae:50:ba:fc:96:67:54:96: 99:af:fb:c4:e3:06:b4:20:36:36:1b:95:c0:bc:dc: 90:f9:e3:77:65:63:a1:ef:f7:11:68:17:83:e0:10: f5:02:88:6e:3d:ca:ad:9f:2f:d4:3d:68:de:a6:f4: 2c:29:07:3a:71:0e:0e:cc:b3:2b:a7:21:02:75:53: 87:20:92:fb:d9:b5:da:b1:e6:f2:59:3e:84:91:08: 06:9d:c5:6b:ff:ae:38:86:3d:6f:3a:f2:b9:6f:7b: 5e:2f:c8:5d:3c:66:31:89:ca:3f:9a:ba:46:68:9e: db:0f:b9:cd:ef:c7:b5:0a:a9:82:52:45:03:c2:c0: a8:70:0b:5f:0b:9a:3d:f3:e8:b9:c2:cc:9a:e7:fd: 75:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:10:7B:92:FB:F7:FD:06:48:5C:5C:8D:55:FD:92:2E:C1:86:13:C9 X509v3 Authority Key Identifier: keyid:35:C6:D8:48:31:6C:21:D9:93:CF:6E:4C:06:D6:01:DC:05:EF:C4:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F473F/1D17EDB42B9011EE8B5DE470C4F9AE02/NcbYSDFsIdmTz25MBtYB3AXvxOE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NcbYSDFsIdmTz25MBtYB3AXvxOE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F473F/1D17EDB42B9011EE8B5DE470C4F9AE02/NcbYSDFsIdmTz25MBtYB3AXvxOE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 25:74:7f:0e:28:44:1f:5d:0f:3e:15:81:2f:ce:6d:28:78:5b: bb:1f:71:d9:11:a8:5b:68:61:9f:09:30:e3:dd:2f:61:09:4f: d3:01:fa:c4:46:40:95:7a:1c:a8:f4:19:36:47:ff:2a:f6:70: 64:f4:e2:b7:00:a8:6b:91:d9:d5:53:7e:4a:f3:10:04:70:21: a1:05:ad:7c:f2:5d:ec:53:bc:df:a5:b0:bd:ee:46:b3:11:14: c7:96:9b:df:6e:ec:5b:e4:57:a9:d9:b4:d4:79:ea:55:f3:7e: 65:10:a2:e3:d9:1b:9b:44:77:95:d0:40:98:a9:16:50:50:47: c2:01:87:32:d5:e0:bd:c5:5c:b6:05:c5:d6:ea:36:92:d8:c3: 89:0e:02:6d:b7:b9:25:03:45:b9:26:68:24:1f:68:7b:ea:e5: d9:2d:e4:49:cc:f4:86:a2:64:38:a6:4d:f1:2c:0f:9a:ff:11: 70:e6:91:74:85:98:ca:1f:f6:35:fa:69:e5:b6:4c:96:37:ed: 17:45:80:73:8c:cf:a5:cf:39:4c:ee:da:aa:06:0e:e1:16:7f: 97:d8:f0:35:bf:d5:4c:16:09:32:5d:45:98:91:bc:52:f2:62: ac:9c:0a:fc:fb:f2:d1:d9:54:ca:00:4d:2d:b6:58:4f:c4:98: c1:0f:08:90 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJ0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjQ3M0YxMTAvBgNVBAUTKDM1QzZEODQ4MzE2QzIxRDk5M0NGNkU0QzA2RDYwMURD MDVFRkM0RTEwHhcNMjQwNTE5MDY1MDUxWhcNMjQwNTI2MDY1MDUxWjAYMRYwFAYD VQQDEw02NjQ5YTE0Yi04ZTBhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtrTc+9AXZd8kp5y7POBjrMr33peS2IGLPhy9SSH5QLF3HWXTEi4kTEF1pZsa cG8YtPxWyFXX0y/qdHeodFoThzc82fLo1ek8MqqObs4Z8bp35H902GCpZkWkZV0m LRk/Z4qMjGNefWVYYg1X6HN2rlC6/JZnVJaZr/vE4wa0IDY2G5XAvNyQ+eN3ZWOh 7/cRaBeD4BD1AohuPcqtny/UPWjepvQsKQc6cQ4OzLMrpyECdVOHIJL72bXaseby WT6EkQgGncVr/644hj1vOvK5b3teL8hdPGYxico/mrpGaJ7bD7nN78e1CqmCUkUD wsCocAtfC5o98+i5wsya5/11JwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLUQe5L7 9/0GSFxcjVX9ki7BhhPJMB8GA1UdIwQYMBaAFDXG2EgxbCHZk89uTAbWAdwF78Th MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNDczRi8xRDE3RURCNDJC OTAxMUVFOEI1REU0NzBDNEY5QUUwMi9OY2JZU0RGc0lkbVR6MjVNQnRZQjNBWHZ4 T0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05jYllTREZzSWRtVHoyNU1CdFlCM0FYdnhPRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NDczRi8xRDE3RURCNDJCOTAxMUVFOEI1REU0NzBDNEY5QUUwMi9OY2JZU0RGc0lk bVR6MjVNQnRZQjNBWHZ4T0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAldH8OKEQfXQ8+FYEvzm0oeFu7H3HZEahbaGGfCTDj3S9hCU/TAfrE RkCVehyo9Bk2R/8q9nBk9OK3AKhrkdnVU35K8xAEcCGhBa188l3sU7zfpbC97kaz ERTHlpvfbuxb5Fep2bTUeepV835lEKLj2RubRHeV0ECYqRZQUEfCAYcy1eC9xVy2 BcXW6jaS2MOJDgJtt7klA0W5JmgkH2h76uXZLeRJzPSGomQ4pk3xLA+a/xFw5pF0 hZjKH/Y1+mnltkyWN+0XRYBzjM+lzzlM7tqqBg7hFn+X2PA1v9VMFgkyXUWYkbxS 8mKsnAr8+/LR2VTKAE0ttlhPxJjBDwiQ -----END CERTIFICATE-----Generated at Sun May 19 07:40:46 2024 by rpki-client on console-fra.rpki-client.org